Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
File: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft (raw, json)
Hash identifier: nxFgCQHi34QPDYM+Oyv1AGR5acBpymIeDvtMMUpI7Y8=
Subject key identifier: EB:85:EC:70:6E:DE:41:5E:7E:49:B6:CE:57:15:55:46:A4:23:B1:29
Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
Certificate issuer: /CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Certificate serial: 01965492A3B64EAAEC0282AC1033D5E36E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
Manifest number: 1502
Signing time: Sun 20 Apr 2025 19:00:17 +0000
Manifest this update: Sun 20 Apr 2025 19:00:17 +0000
Manifest next update: Mon 21 Apr 2025 19:00:17 +0000
Files and hashes: 1: HFN5MH980DuANiJdbkL6ohnJj_k.roa (hash: Em5iJ0QcHb70vMs6Q6eEnq42l8uUpkT28Ocl0kx6uPc=)
2: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl (hash: k/SqcIYziFw9Rwic2iohVH1OR5855ez79eZL8w12qpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:a3:b6:4e:aa:ec:02:82:ac:10:33:d5:e3:6e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Validity
Not Before: Apr 20 19:00:17 2025 GMT
Not After : Apr 21 19:00:17 2025 GMT
Subject: CN=eb85ec706ede415e7e49b6ce57155546a423b129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:4f:fe:6b:72:38:40:ec:98:a3:43:84:0c:
2a:b1:03:2e:39:b1:15:93:8b:cf:57:03:ee:d8:cb:
5f:7a:03:2e:aa:2f:c3:e6:85:da:fe:5b:09:14:14:
e4:58:63:98:fd:37:fa:b1:47:2a:fc:76:e2:2f:bf:
97:89:bf:eb:17:87:99:d6:70:64:4c:ea:21:03:11:
b3:05:d6:b2:e9:e2:d1:c4:ad:f6:d7:94:8f:07:3b:
51:6c:74:a1:bc:6a:28:c6:85:99:1d:b1:d9:a1:fb:
e8:ff:68:6c:9d:d6:db:42:fa:b7:09:47:67:46:c8:
db:9c:25:60:fb:f7:79:ab:6b:3a:e7:fe:b4:a0:02:
a2:01:3c:f2:2a:b6:9f:ed:1a:c6:86:1e:da:86:47:
bd:21:17:9c:4a:aa:ec:e2:5f:05:b8:9a:97:22:a8:
a5:46:56:3a:6f:1a:16:4f:20:62:74:22:bb:0a:20:
9c:bf:32:63:bc:30:ba:ba:5f:4f:00:38:01:c6:fd:
30:a0:fa:1a:db:27:27:7e:d8:e6:75:c7:39:c6:2c:
97:e0:e2:08:72:93:57:21:42:f8:de:a0:a0:21:cd:
a0:a0:a9:42:87:a0:3b:88:e7:a2:b9:8e:5d:a9:af:
d9:fd:39:58:4c:47:11:4e:44:50:4a:9a:88:af:b8:
42:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:85:EC:70:6E:DE:41:5E:7E:49:B6:CE:57:15:55:46:A4:23:B1:29
X509v3 Authority Key Identifier:
keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a0:d5:94:3e:dc:68:d8:3e:0f:06:4e:da:02:9b:6a:34:0f:
32:34:f3:56:7e:b7:22:81:dd:7f:30:96:5a:85:63:e5:37:5f:
ca:d6:0a:53:db:21:be:94:c1:7b:5a:cf:3a:b6:c4:f3:f1:ca:
67:c4:7b:fc:29:1c:92:ee:5f:4e:96:bb:81:6e:e3:86:d0:c3:
5f:5c:db:07:6c:53:de:19:ee:73:98:5b:ba:15:7a:a9:08:c3:
ca:8a:de:1d:8f:1b:e0:4c:89:fd:d1:91:14:1d:45:56:0f:67:
0f:5d:66:47:90:7e:8d:27:19:7d:44:ae:47:f4:a7:8f:ea:15:
4d:1e:00:2a:03:b2:a7:82:4c:94:fa:27:88:d0:da:04:50:6e:
47:31:92:2e:d0:d0:b1:30:a2:28:d5:13:a2:e3:c4:f9:9f:7e:
e2:7a:b0:f7:6c:e3:e6:43:00:64:69:35:a4:67:f3:3d:2e:91:
7f:cb:54:d6:62:04:32:50:91:5d:ec:61:6e:06:61:29:f1:bf:
9d:ff:fb:b9:44:6a:78:f1:63:bb:9e:2d:62:1e:87:40:a3:90:
e4:4e:fd:26:f6:30:15:0a:3f:d9:fb:90:52:4f:aa:f5:1d:6c:
0f:be:2b:2c:81:54:f0:5f:3f:4a:99:23:4d:c9:de:5d:a4:74:
e7:e0:41:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:11:07 2025 by rpki-client